CLI 6.34.27.0
May 1st, 2026
[6.34.27.0] - 2026-04-30
Changed
- Tanium sync commands now handle scaled environments (100k+ records) without hanging or running out of memory
- Tanium policy and data findings no longer create duplicates for non-CVE results
- Tanium sync runs faster and now logs throughput progress during long-running operations
- SentinelOne integration now uses native SentinelOne agent IDs for asset and finding tracking
Fixed
- Scanner integration batch syncs (Axonius, Tanium, SentinelOne) no longer create duplicate records or drop linked Issues when a batch request times out
- Azure Entra evidence collection no longer hangs on large tenants; live progress is shown, Microsoft Graph throttling is handled automatically, and access review evidence with shared display names is preserved
- Qualys integration now constructs correct API URLs for production deployments where Container Security and VMDR are hosted on different Qualys sub-domains
- Qualys Total Cloud and other JSONL-based scanners no longer fail to start with date format errors
- now supports , , and flags for consistency with other Qualys commands
- SentinelOne vulnerability sync no longer creates duplicate findings when the same CVE affects multiple records
- SentinelOne no longer collapses applications with similar names (e.g., "Microsoft Visual Studio 2019" and "Microsoft Visual Studio 2022") into the same finding
- SentinelOne integration no longer leaks connections during long-running or repeated syncs
- Tanium Cloud endpoint queries now return faster when a record limit is specified
- and no longer stop after 50 records; all matching records are now processed
Added
- Configurable GCP Security Command Center API endpoint via in init.yaml to support alternate or non-Google hosts
- SARIF and commands now accept to run compliance sync against a Component as an alternative to